CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-07-14
Windows DNS Server Remote Code Execution Vulnerability (SIGRed - CVE-2020-1350) Technical Analysis and Hardening Guide
[Affected Scope] All Windows Server versions from 2008 through 2019 with the DNS Server role enabled.
[Impact] Successful exploitation allows unauthenticated remote attackers to execute arbitrary code with SYSTEM privileges, potentially leading to full Active Directory domain compromise.
[Mitigation] Apply the official Microsoft security updates immediately, or implement the registry-based workaround to restrict maximum DNS packet size.